AI Copilot – Content Generator

Information

Software Type	Plugin
Software Slug	ai-copilot-content-generator (view on wordpress.org)
Software Status	Removed
Software Author	wupsales
Software Downloads	27,713
Software Active Installs	1,000
Software Record Last Updated	July 16, 2026

6 Vulnerabilities

Submit a Vulnerability

AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions

5.3

CVE-2026-6804

Jul 10, 2026

Researcher: Kazuma Matsumoto

AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'

5.3

CVE-2026-6803

Jul 10, 2026

Researcher: Kazuma Matsumoto

AI Copilot – Content Generator <= 1.5.4 - Unauthenticated SQL Injection

7.5

CVE-2026-59515

Jul 9, 2026

Researcher: VanTastic

AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated Privilege Escalation

9.8

CVE-2026-48879

Jun 1, 2026

Researcher: daroo

AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header

6.4

CVE-2026-2955

May 19, 2026

Researcher: Kazuma Matsumoto

AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()

7.5

CVE-2026-2993

May 11, 2026

Researcher: Kazuma Matsumoto

Title	Status	CVE ID	CVSS	Researchers	Date
AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Modification via 'publishTasks' and 'unpublishTasks' AJAX Actions	Patched	CVE-2026-6804	5.3	Kazuma Matsumoto	July 10, 2026
AI Chatbot & Workflow Automation by AIWU <= 1.4.12 - Missing Authorization to Unauthenticated Arbitrary Data Deletion via AJAX Actions 'removeGroup' and 'clear'	Patched	CVE-2026-6803	5.3	Kazuma Matsumoto	July 10, 2026
AI Copilot – Content Generator <= 1.5.4 - Unauthenticated SQL Injection	Patched	CVE-2026-59515	7.5	VanTastic	July 9, 2026
AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated Privilege Escalation	Patched	CVE-2026-48879	9.8	daroo	June 1, 2026
AI Chatbot & Workflow Automation by AIWU <= 1.4.14 - Unauthenticated Stored Cross-Site Scripting via 'X-Forwarded-For' Header	Patched	CVE-2026-2955	6.4	Kazuma Matsumoto	May 19, 2026
AI Chatbot & Workflow Automation by AIWU <= 1.4.17 - Unauthenticated SQL Injection in getListForTbl()	Unpatched	CVE-2026-2993	7.5	Kazuma Matsumoto	May 11, 2026

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation